> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several critical threats and developments. The new Hirudo Android malware is particularly concerning, as it replaces legitimate banking apps to steal credentials while evading security measures. Additionally, Microsoft's October Patch Tuesday saw a record 1,413 vulnerabilities addressed, including a zero-day actively exploited in the wild. Researchers also demonstrated the potential dangers of AI, with one team creating a full-chain Chrome exploit in just six days using public AI models. Meanwhile, fake "Meta Careers" pages are being used to phish Facebook and Google logins, emphasizing the ongoing risk of credential theft. Lastly, a crackdown on North Korean IT farms highlights the geopolitical dimensions of cyber threats.
|
// AI-powered summary generated at 12:01
How Do Non-Human Identities Fit Into Cybersecurity? Have you ever considered how machine identities play a crucial role in cybersecurity? Non-Human Identities (NHIs) are at the heart of modern security strategies, especially when managing secrets and ensuring a secure digital ecosystem. With the inc...
How Secure Is Your Cloud Environment? Has your organization truly fortified its cloud environment against potential threats? Evolving cybersecurity continually presents new challenges, especially when it comes to protecting digital assets. Understanding Non-Human Identity and Secrets Security Manage...
Microsoft this week pushed security updates to fix more than 60 vulnerabilities in its Windows operating systems and supported software, including at least one zero-day bug that is already being exploited. Microsoft also fixed a glitch that prevented some Windows 10 users from taking advantage of an...
What Are Non-Human Identities (NHIs) and Why Are They Crucial for Safe Agentic AI? Have you considered the growing importance of Non-Human Identities (NHIs), especially when it comes to safeguarding Agentic AI systems? Where organizations across various industries embrace the potential of artificial...
Five pleaded guilty to aiding North Korea ’s illicit revenue via IT worker fraud, violating international sanctions. The U.S. Department of Justice announced that five people have pleaded guilty to helping North Korea secretly generate revenue by running illegal IT-worker schemes that violated inter...
Le vol d'identifiants n'est pas qu'un simple désagrément : c’est souvent le premier acte d’une réaction en chaîne qui aboutit à une compromission générale.
Google is suing the Smishing Triad group behind the Lighthouse phishing-as-a-service kit that has been used over the past two years to scam more than 1 million people around the world with fraudulent package delivery or EZ-Pass toll fee messages and stealing millions of credit card numbers. Google...
SESSION
Session 3B: Wireless, Cellular & Satellite Security
Authors, Creators & Presenters: Jung-Woo Chang (University of California, San Diego), Ke Sun (University of California, San Diego), Nasimeh Heydaribeni (University of California, San Diego), Seira Hidano (KDDI Research, Inc.), Xinyu...
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter 9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads GlassWorm Returns: New Wave Strikes as We Expose Attacker Infrastructure Gootl...
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Multiple Vulnerabilities in GoSign Desktop lead t...
Google will start taking action on Android apps in the official Google Play store that have high background activity and cause excessive battery draining. [...]
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed
In his book Comfort Override: Future-Proof Your Life as AI Flips Your World, Ranan Lachman explores how we can prepare and adapt for unprecedented change and offers practical, hands-on help.
The post Can You Future-Proof Your Life in the Age of AI? (Book Review) appeared first on Security Boulevard.
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Adopting a counterintelligence mindset in luxury logistics In this Help Net Security interview, Andrea Succi, Group CISO at Ferrari Group, discusses how cybersecurity is integrated into every aspect of...
Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsingThis week, it was an absolute privilege to be at Europol in The Hague, speaking about cyber offenders and at the InterCOP conference and spending time with some of the folks involve...
China-linked actors used Anthropic’s AI to automate and run cyberattacks in a sophisticated 2025 espionage campaign using advanced agentic tools. China-linked threat actors used Anthropic’s AI to automate and execute cyberattacks in a highly sophisticated espionage campaign in September 2025. The cy...
The finger.exe command is used in ClickFix attacks.
The SANS Holiday Hack Challenge™ 2025 is available.
Les systèmes informatiques de la société de services publics Stadtwerke Detmold ont été victimes d'une cyberattaque, entraînant une panne complète de leurs services en ligne et de leurs communications téléphoniques et par e-mail. La société assure que les services de base tels que l'eau, l'électrici...
Rainbow Communications, un fournisseur de services de télécommunications, a subi un événement de cybersécurité qui a perturbé ses services de téléphone et de PBX dans le nord-est du Kansas. L'entreprise travaille à restaurer les services et a mis en place une ligne d'assistance temporaire pour les c...